Overview 4 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 2 public PoC · 0 EPSS ≥ 0.5
4matches
0in Waratek scope0.0%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
2public PoC50.0%
0EPSS ≥ 0.50.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
1
25.0%
Not applicable
3
75.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
4
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
2
50.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
2
50.0%
split by
peak 2 / quarter
Q3 011
Outside Waratek scope1
High1
not blocked1
No public exploit1
Q4 010
Q1 020
Q2 020
Q3 020
Q4 020
Q1 030
Q2 030
Q3 030
Q4 032
Not applicable2
Medium2
not blocked2
Working exploit published2
Q1 040
Q2 040
Q3 040
Q4 040
Q1 050
Q2 050
Q3 050
Q4 051
Not applicable1
Medium1
not blocked1
No public exploit1
Q4 01Q2 02Q4 02Q2 03Q4 03Q2 04Q4 04Q2 05Q4 05
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2005-4845 | Medium | 2005-12-31 | Not applicable | No public exploit | The Java Plug-in 1.4.2_03 and 1.4.2_04 controls, and the 1.4.2_03 and 1.4.2_04 <applet> redirector controls, allow remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer. |
| CVE-2003-1521 | Medium | 2003-12-31 | Not applicable | Working exploit published | Sun Java Plug-In 1.4 through 1.4.2_02 allows remote attackers to repeatedly access the floppy drive via the createXmlDocument method in the org.apache.crimson.tree.XmlDocument class, which violates the Java security model. |
| CVE-2003-1516 | Medium | 2003-12-31 | Not applicable | Working exploit published | The org.apache.xalan.processor.XSLProcessorVersion class in Java Plug-in 1.4.2_01 allows signed and unsigned applets to share variables, which violates the Java security model and could allow remote attackers to read or write data belonging to a signed applet. |
| CVE-2001-1008 | High | 2001-08-31 | Outside Waratek scope | No public exploit | Java Plugin 1.4 for JRE 1.3 executes signed applets even if the certificate is expired, which could allow remote attackers to conduct unauthorized activities via an applet that has been signed by an expired certificate. |